Medium SSA-831168 1 CVE

SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4

Published Feb 8, 2022 · Updated Feb 8, 2022

Vendor: Siemens Product: Spectrum Power™ 4

Summary

A Cross-Site Scripting (XSS) vulnerability is found in the integrated web application "Online Help" of Spectrum Power 4.

Siemens has released an update for the Spectrum Power 4 and recommends to update to the latest version.

Vulnerabilities 1

Unscored —

CVE-2022-23312

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web…

Siemens Spectrum Power™ 4 ICS / OT

Feb 9, 2022

Revision history

2022-02-08 #1
Publication Date

References

SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-831168.pdf
SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-831168.txt